An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 16, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | Sep 24, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Sep 30, 2019 | Aug 19, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2019 | Aug 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 19, 2019 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-source-azure | Sep 21, 2019 | Aug 19, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-5.0.0-1018-awsUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1022-azureUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.4.0-165-powerpc64-smpUpgrade linux-image-5.0.0-31-genericUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.4.0-165-genericUpgrade linux-image-generic-lpae | Sep 3, 2019 | Aug 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub